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extracting a digital signature from said host 
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querying a remote digital signature database via a network 
interface and requesting a digital signature corresponding to 
the digital signature extracted from the host 
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receiving the corresponding digital signature from the 
remote digital signature database 
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matching digital signature received from said remote digital 
signature database with digital signature extracted at said 

host 
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upon identifying a mismatch, fransmLtting an instruction to a 
remote log database via the network interface, wherein the 
instruction is executed in the remote log database to record 
an entry in a log file indicating a possible intrusion in the 

host 
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issuing a command to bring down the 
network interfaces to isolate the host 
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issuing a command to an operating system 
of host to bring the host to a single user 

state 
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